The fastest way to change your Facebook password

Open Facebook on any device, click the downward arrow in the top right corner, and select Settings and privacy, then Settings. On the left side, click Password and security. Click Change password, enter your current password, type your new password twice, and click Change password at the bottom. The change takes effect when ready.

If you are on a phone, the steps are the same but the menu looks slightly different. Tap the three horizontal lines (called a menu icon) at the bottom right, scroll down to Settings and privacy, tap Settings, then tap Password and security. The rest follows the same order.

You do not need to log out of other devices or browsers after changing your password. Facebook will keep you signed in on the device you used to make the change, but you will be signed out everywhere else within a few hours. If you want to sign out when ready on other devices, you can do that from the same Password and security page by clicking Where you're logged in and selecting Log out next to each session.

Key Takeaways

  • You can change your password in Settings and privacy > Settings > Password and security > Change password, and it takes effect right away.
  • A strong password has at least 12 characters and mixes uppercase letters, lowercase letters, numbers, and symbols — avoid words from the dictionary or personal information.
  • You should change your password if you have reused it on other websites, if someone else has used your account, or if you have not changed it in over a year.
  • If you cannot remember your current password, click Forgot password? on the login screen and follow the recovery steps using your email or phone number.

Why changing your password matters for your account safety

Your Facebook password is the main lock on your account. If someone else knows it, they can read your messages, see your photos, post as you, or change your email address to lock you out. Changing your password regularly — especially if you have used the same one on other websites — reduces the chance that a breach on another site gives someone access to your Facebook account.

Many people reuse passwords across multiple websites because they are easier to remember. But if one website is hacked and passwords are stolen, attackers will try that same password on Facebook, Gmail, banking sites, and anywhere else. If your Facebook password is unique and strong, a breach somewhere else cannot hurt your account.

What makes a password strong enough

A strong password is hard to guess and hard to crack. It should be at least 12 characters long and include uppercase letters, lowercase letters, numbers, and symbols like ! @ # $ % or &. Avoid words you can find in a dictionary, your name, your birth year, or anything someone could learn from your Facebook profile.

A weak password looks like "Facebook2024" or "MyPassword1". A stronger one looks like "BlueMoon$Laptop92!". You do not have to make it random gibberish — you can use a phrase you will remember, like "ILoveMyDog$InJune2019", as long as it mixes character types and is not something you have posted publicly.

If you struggle to remember a strong password, use a password manager like Bitwarden, 1Password, or the password manager built into your phone. These tools store passwords securely and fill them in automatically, so you only have to remember one strong master password.

When you should change your password right away

Change your password when ready if you think someone else has accessed your account. Signs include posts you did not write, messages you did not send, a changed email address or phone number, or login alerts from places you do not recognize. After you change your password, go to Password and security > Where you're logged in and log out all other sessions.

You should also change your password if you have reused it on other websites and one of those sites has had a data breach. You can check whether your email address has appeared in a known breach by visiting haveibeenpwned.com and typing in your email. If it shows up, change your Facebook password and any other passwords that match.

Beyond these urgent cases, change your password at least once a year as routine maintenance. Many people change theirs every six months or whenever they update passwords on other important accounts.

How to recover your account if you forget your password

If you cannot log in because you forgot your password, go to the Facebook login page and click Forgot password? below the password field. Enter your email address or phone number associated with your account. Facebook will send you a link to reset your password — check your email inbox and spam folder.

Click the link in the email, and you will be taken to a page where you can create a new password. Enter it twice and click Continue. You will be logged back in automatically. If you do not receive an email within a few minutes, make sure you are using the correct email address or phone number, and check your spam folder.

If you cannot access the email or phone number on your account, click No longer have access to these? on the password reset page. Facebook will ask you to verify your identity using other information, such as your name, date of birth, or recent login locations. This process can take longer but will let you regain access.

Protecting your account beyond just the password

A strong password is important, but it is not enough on its own. Turn on two-factor authentication to add a second lock to your account. With two-factor authentication enabled, anyone trying to log in from a new device will have to enter a code from your phone or email, even if they have your password.

To turn it on, go to Settings and privacy > Settings > Password and security > Two-factor authentication. Choose whether you want codes sent to your phone number via text message or generated by an authentication app like Google Authenticator or Microsoft Authenticator. An authentication app is slightly more find because text messages can sometimes be intercepted, but either option is much better than no two-factor authentication.

You should also review which apps and websites have permission to access your Facebook account. Go to Settings and privacy > Settings > Apps and websites and remove any apps you no longer use. Remove anything you do not recognize.

What to do if you think someone has your password

If you suspect someone knows your password but has not yet accessed your account, change it right away using the steps at the top of this guide. Then go to Password and security > Where you're logged in and log out all sessions except the one you are currently using.

If someone has already accessed your account and changed your email address or phone number, you may not be able to reset your password using the normal method. Go to facebook.com/login/identify and follow the steps to regain access. Facebook will ask you to verify your identity and may take up to a few days to restore your account.

After you regain access, change your password, turn on two-factor authentication if you have not already, and review your recent login activity. If you see logins from places you do not recognize, log out those sessions and consider changing the passwords on any other accounts that share a similar password.

Frequently Asked Questions

Will changing my password sign me out of Facebook on my phone?

You will stay signed in on the device you used to change your password, but you will be signed out on other devices within a few hours. If you want to sign out when ready everywhere else, go to Password and security > Where you're logged in and click Log out next to each session.

Can I change my password if I do not remember my current one?

No, you cannot change your password without knowing the current one. Instead, click Forgot password? on the login page and follow the recovery steps using your email or phone number. Facebook will send you a reset link.

How often should I change my Facebook password?

At minimum, change it once a year. If you reuse passwords across websites, change it whenever you learn of a breach on another site. If you think someone has accessed your account, change it when ready.

Is it safer to use a password manager to store my Facebook password?

Yes. A password manager lets you use a unique, strong password without having to remember it. The password is encrypted and only unlocked with your master password. This is safer than reusing a password across multiple sites or writing it down.

What should I do if Facebook asks me to change my password?

If you see a notification asking you to change your password, do it right away. Facebook usually sends these alerts when it detects suspicious activity on your account or when your password has been found in a data breach elsewhere. Follow the same steps listed at the top of this guide.